Privacy Policy

1. Who this policy covers

• Workspace customers — businesses and their team members who create an AiVert account and connect WhatsApp Business accounts.
• End users — people who message a customer's WhatsApp Business number. AiVert processes their message data on behalf of that customer.

When we process end-user messaging data for a customer, that customer is typically the controller of the data and AiVert acts as a processor / service provider.

2. Information we collect

Account and workspace data

• Name, email address, password (hashed), and organization / workspace details
• Role and membership information within a workspace
• Billing or subscription details if you purchase paid plans

WhatsApp / Meta integration data

• WhatsApp Business Account (WABA) IDs, phone number IDs, display names, and connection status
• Access tokens and related credentials required to call Meta's WhatsApp Cloud API (stored encrypted at rest)
• Message templates, template statuses, and related Meta webhook events
• Message content, media metadata, delivery/read statuses, and conversation metadata exchanged through connected WhatsApp numbers
• Contact lists and audience data uploaded or synced by customers

Technical and usage data

• IP address, browser/device information, and approximate location derived from IP
• Log data, diagnostics, and product analytics about how the Service is used
• Cookies or similar technologies needed for authentication and security

3. How we use information

• Provide, operate, and secure the Service (inbox, templates, broadcasts, webhooks)
• Connect and operate WhatsApp Cloud API integrations on a customer's behalf
• Authenticate users, prevent abuse, and troubleshoot issues
• Improve product performance and reliability
• Communicate about service updates, security notices, and support requests
• Comply with law and enforce our terms

We do not sell personal information. We do not use customer WhatsApp message content to train third-party foundation models.

4. Meta and WhatsApp

AiVert integrates with Meta Platforms technologies, including WhatsApp Cloud API and Embedded Signup. When you connect a WhatsApp Business account, Meta also processes data under Meta's terms and policies. Message delivery fees and WhatsApp usage may be billed by Meta directly to the business that owns the WABA.

Relevant Meta policies include the Meta Privacy Policy and WhatsApp Business terms available on Meta's websites. Customers are responsible for obtaining any required consents from end users before messaging them on WhatsApp.

5. Sharing of information

We may share information with:

• Meta / WhatsApp — as needed to send and receive messages and manage connected business assets
• Infrastructure providers — hosting, databases, email, monitoring, and similar processors that help us run the Service
• Customer workspaces — team members with access to a workspace can view data belonging to that workspace
• Legal / safety — when required by law, or to protect rights, safety, and the integrity of the Service

6. Data retention

We retain account and workspace data for as long as the account is active and as needed to provide the Service. Message, contact, and template data are retained according to customer workspace settings and our operational backups, unless a longer period is required for legal, security, or dispute-resolution purposes. Customers may request deletion of their workspace data as described below.

7. Security

We use administrative, technical, and organizational measures designed to protect information, including encrypted storage of sensitive WhatsApp tokens, access controls, and transport encryption (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International transfers

We may process and store information in India and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

9. Your rights and choices

Depending on your location and role, you may have rights to access, correct, delete, or export personal data, or to object to / restrict certain processing. Workspace admins can update account details in the Service. To request access or deletion, contact us at the email below. End users should contact the business they messaged; we will assist that business as needed.

10. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

12. Contact

For privacy questions or requests, contact us at privacy@aivert.in.

Website: https://aivert.in